After installing ADPASSMON follow the instructions below to sync up a users password with AD and Keychain.

Click on ADPASSMON icon in the top toolbar. Select "Test Settings".

It will ask to refresh their Kerberos ticket.

Have them input their password. You may need to "Test Settings" again.

The window should refresh and let them know when the password expires.

Tell them from now on, it is best to change pw via ADPASSMON by clicking on the icon in the top toolbar (it is simply that days remaining - ex: 32d) and click "change password." This will update AD and Keychain.